Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VlkoIx7qwuqImBEB10qoamlZCZY.roa
File: VlkoIx7qwuqImBEB10qoamlZCZY.roa (raw, json)
Hash identifier: kgr6TTH67al+cZ4xjchsG3Bn0gYz4VuiQ52z+q6Cac4=
Subject key identifier: 56:59:28:23:1E:EA:C2:EA:88:98:11:01:D7:4A:A8:6A:69:59:09:96
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7745B5140996B0559AF68D96F631C79F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VlkoIx7qwuqImBEB10qoamlZCZY.roa
Signing time: Sun 17 Dec 2023 10:15:06 +0000
ROA not before: Sun 17 Dec 2023 10:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:45:b5:14:09:96:b0:55:9a:f6:8d:96:f6:31:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 10:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=565928231eeac2ea88981101d74aa86a69590996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:ef:94:35:02:b6:ba:fa:07:79:bc:ba:c8:
6d:11:6a:29:57:ef:a1:92:d7:2f:e0:38:a7:5f:c7:
bf:89:35:72:2e:c3:b2:0a:eb:7d:22:41:81:bb:f2:
9e:9e:d7:7c:69:d8:c7:57:e0:54:80:3f:7f:4b:7c:
60:38:fe:a2:77:63:18:07:4d:55:fa:cb:36:83:df:
83:e6:c9:ce:10:22:a6:7d:fc:3e:d8:99:11:1f:32:
51:4c:cc:9e:49:db:62:a6:2f:08:fe:4f:18:4a:81:
9e:94:fa:df:d7:65:62:c3:48:ab:70:c5:47:17:8c:
6d:48:a8:10:a2:62:6a:8f:7e:0f:0a:64:6a:37:69:
03:25:49:7e:a8:24:7f:9e:6b:1a:b2:5a:2e:a2:32:
2c:76:75:73:b8:e1:ce:27:55:cc:c6:cc:61:fa:e2:
69:71:77:8c:af:99:24:ac:f1:d2:e1:f7:2e:f0:3d:
d4:f9:1d:02:60:19:0a:20:98:68:10:ed:73:96:f2:
15:84:f2:39:04:4f:61:8f:20:30:18:6c:df:41:76:
51:4b:f5:97:1a:f7:ee:50:c5:2c:e1:64:cb:78:b9:
19:99:5d:cc:35:fd:37:65:f9:45:bd:58:f7:6d:41:
bd:9a:c5:b3:53:78:98:f5:89:c9:17:2b:5f:c4:ef:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:28:23:1E:EA:C2:EA:88:98:11:01:D7:4A:A8:6A:69:59:09:96
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/VlkoIx7qwuqImBEB10qoamlZCZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:73:91:7b:8b:93:88:d0:cc:5b:18:07:be:cd:de:0b:a4:0c:
f2:a8:a5:c7:d7:b3:bf:8b:3f:aa:e1:63:9d:27:65:f2:56:2b:
82:6f:3f:4b:82:4d:04:c1:ac:0d:10:fa:5b:64:53:ab:bf:fe:
9b:be:e3:c4:42:41:0f:01:60:42:20:2e:ec:55:2c:ab:f7:a3:
42:28:1a:3e:78:4d:b7:70:6b:89:66:af:0d:b5:9f:fd:99:95:
83:52:d2:e5:bf:b1:a5:a1:8c:76:02:35:6f:46:0d:00:2c:aa:
1a:20:90:3f:9b:b2:97:d7:49:8a:53:65:38:50:5f:a9:c6:66:
48:22:d0:5a:c4:55:1b:c6:91:18:46:a3:f0:d1:27:fd:2c:a6:
ae:b8:9e:89:99:7a:65:00:2c:18:03:66:90:80:f1:04:23:56:
55:5c:41:88:c3:df:1e:2f:28:29:dc:8b:ad:95:51:fe:ac:61:
ba:a1:1b:57:f7:76:7a:aa:07:fa:06:f8:93:35:c7:8b:74:6c:
f2:b6:8b:0a:88:78:33:e6:e6:32:2c:a3:61:3b:76:75:8c:4d:
76:0c:0c:62:bc:90:c8:b8:8d:70:02:e9:93:f0:ef:63:c0:5e:
55:99:ab:88:bb:22:0a:86:d4:be:d0:32:31:e5:0d:cf:29:1c:
87:c3:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:02:21 2025 by rpki-client